Which method can be used to access memory that is locked by the system?

• A. Kernel drivers
• B. Usermode tools
• C. Hypervisor interface
• D. BIOS access

Answer: (A)

Access to protected memory is controlled by privilege levels. User-mode processes operate with restricted access and cannot touch pages managed by the kernel. Kernel drivers run in kernel mode, giving them the authority to read or write memory that is off-limits to user space, often by mapping physical memory or interfacing directly with the system’s memory manager. This elevated access is what allows a kernel driver to interact with memory that the system keeps locked for protection and stability.

User-mode tools are constrained by memory protection and cannot access kernel-managed memory. BIOS access occurs before the operating system runs and isn’t used to manipulate memory protections within a running system. In virtualization, a hypervisor interface can offer memory visibility in some setups, but it isn’t the general mechanism for accessing system-locked memory within the running OS.